Cisco to buy cyber-security company Duo for $2.35 billion

(Reuters) - Cisco Systems Inc said on Thursday it would buy Duo Security, a venture capital-backed cyber security company, for $2.35 billion in cash, as part of its push to expand into a faster growing area of software than its core business.

A Cisco Systems sign is seen outside a Cisco health clinic at Cisco Systems in San Jose, California, U.S., March 22, 2018. Picture taken March 22, 2018. REUTERS/Elijah Nouvelage

The deal is the biggest acquisition for Cisco since its $3.7-billion purchase of business performance monitoring software company AppDynamics last year, and its largest in the cyber security sector since its $2.7-billion takeover of Sourcefire in 2013.

The deal is an example of “a move toward software and our shift to more recurring revenue with new subscription-based solutions,” Robert Salvagno, head of Cisco’s corporate development said on a conference call Thursday.

Many companies are on the hunt for deals to expand their cybersecurity offerings as corporations want to bulk up their defenses against a wave of cyber attacks by criminals, spies and hacker activists. Earlier this month, telecommunications firm AT&T Inc bought AlienVault, a cybersecurity provider for small and medium-size businesses.

“Cisco is getting its act together in the cyber security market,” Credit Suisse analyst Brad Zelnick said in a research note, noting that Cisco has acquired five security companies over the past three years.

Cisco shares rose 1.6 percent at $42.54 on Thursday.

The deal represents a rare multi-billion dollar exit for cybersecurity venture investors who have been pouring money at a record pace into a crowded market. There are over 3,000 cyber

security companies with more than 400 being funded per year, according to advisory firm Momentum Cyber.

One venture capital firm, Benchmark, saw a 20 times return on its early investment in the company, according to a source familiar with the matter. Benchmark declined to comment.

Based in Ann Arbor, Michigan, Duo had raised $119 million to date from investors such as Lead Edge Capital, Index Ventures, Workday, Redpoint Ventures and True Ventures.

Duo’s platform allows users to verify their identity with a two-step authentication process, a product that Cisco executives said was key as more of their customers are trying to securely connect to applications in the cloud.

The deal, reported first by Reuters, is expected to close in the first quarter of Cisco’s fiscal 2019.

Cisco has been making efforts to transform itself beyond networking. Besides security, it is also focused on investing in what it calls the Internet of Things and cloud-based applications.

Cisco was advised by Goldman Sachs and Barclays as well as the law firm Fenwick & West. Duo was advised by Qatalyst Partners and law firm Gunderson Dettmer.

Reporting by Liana B. Baker in New York and Akanksha Rana in Bengaluru; Editing by Nick Zieminski and Anil D'Silva